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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions and listings of claims in the 
application: 

1 . (Previously presented) A content management method for managing content 
data provided to user equipment, comprising the steps of: 

storing a content key encrypted with a first storage key, content data encrypted 
with the content key, and a second storage key in the user equipment; 

sending the encrypted content key and the second storage key to a key 
management unit; 

at the key management unit, decrypting the encrypted content key using the first 
storage key, the first storage key being stored in the key management unit; and 

encrypting the decrypted content key using the second storage key; 

sending the content key encrypted with the second storage key along with the 
encrypted content to the user equipment; and 

at the user equipment, decrypting the encrypted content key using the second 
storage key and decrypting the content data using the decrypted content key. 

2. (Original) The method as set forth in Claim 1 , wherein the second storage key 
is generated based on a random number. 

3. (Previously presented) The method as set forth in Claim 1, wherein the 
decrypted content key is encrypted with identification information of the user equipment 
and stored into the user equipment. 
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4. (Previously presented) The method as set forth in Claim 1 , wherein the 
content key is encrypted, in the user equipment, with the first storage key and 
identification information of the user equipment, and the content key stored in the user 
equipment is decrypted with the first storage key and the identification information of the 
user equipment. 

5. (Previously presented) The method as set forth in Claim 1 , wherein the 
second storage key is generated by a decrypted key generating means provided in the 
user equipment. 

6. (Previously presented) The method as set forth in Claim 5, wherein the 
second storage key is encrypted with a public key for the key management unit for 
management of the storage keys to generate a third storage key and the third storage 
key is stored into the user equipment. 

7. (Previously presented) The method as set forth in Claim 6, wherein the user 
equipment deletes the second storage key depending upon whether the third storage 
key has been stored in the user equipment. 

8. (Currently amended) The method as set forth in Claim 7, wherein A when 
decrypting the content key stored in the user equipment, the user equipment sends the 
third storage key to the key management unit; and the key management unit generates 
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the second storage key based on the third storage key while performing an accounting 
th e data s e rv i c e following a predetermined procedure. 



9. (Previously presented) The method as set forth in Claim 1 , wherein the 
second storage key is generated by a storage key generating means provided in the 
key management unit which manages the storage keys; and the key management unit 
has stored therein the second storage key and identification information of the user 
equipment in which the content key encrypted with the above generated second storage 
key is stored. 

10. (Currently amended) The method as set forth in Claim 9, wherein upon the 
generation of the second storage key, the key management unit accounts th e data 
s e rvic e performs an accounting following the a predetermined procedure. 

1 1 . (Previously presented) The method as set forth in Claim 9, wherein the key 
management unit encrypts the second storage key with the management key to 
generate a third storage key, and sends the third storage key to the user equipment; 
and the user equipment stores the received third storage key. 

12. (Previously presented) The method as set forth in Claim 11, wherein the user 
equipment deletes the second storage key depending upon whether the third storage 
key has been stored. 
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13. (Previously presented) The method as set forth in Claim 12, wherein the key 
management unit has stored therein the identification information of the user equipment 
in which the content key encrypted with the second storage key is stored; the user 
equipment sends, when decrypting the content key stored in the user equipment, the 
identification information of the user equipment to the key management unit; and the 
key management unit generates the second storage key based on the result of 
comparison between identification information of the user equipment, sent from the user 
equipment, and the identification information of the user equipment, held in the key 
management unit itself, while accounting the data service following the predetermined 
procedure. 

14. (Previously presented) The method as set forth in Claim 1 , wherein the user 
equipment has stored therein identification information of the user equipment. 

15. (Previously presented) The method as set forth in Claim 14, wherein the user 
equipment starts decrypting the content key stored in the user equipment depending 
upon the result of an inspection of the identification information of the user equipment, 
stored in the user equipment. 

16. (Previously presented) The method as set forth in Claim 1 , wherein the 
decrypted content key supplied from the user equipment has added thereto information 
that the content key has been obtained by restoration. 
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17. (Previously presented) The method as set forth in Claim 16, wherein when 
moving the content key having added thereto the information that the content key has 
been obtained by restoration, the user equipment performs an error process based on 
the result of comparison between the content key and another content key stored in a 
destination to which the content key is to be moved. 

18. (Currently amended) The method as set forth in Claim 1 , wherein the 
content key has added thereto frequency information which that limits the number of 
times the content key can be used. 

19. (Previously presented) The method as set forth in Claim 1, further comprising 
storing the content key encrypted with the second storage key in a first storage of the 
user equipment along with identification information of the first storage; storing the 
content key that is stored in the first storage, and the identification information of the first 
storage, into a second storage of the user equipment; and performing, when a request 
is made to decrypt the content key in the first storage, an error process based on the 
result of comparison between the identification information of the first storage and the 
identification information of the second storage. 

20. (Currently amended) A content management system for managing content 
data, comprising: 

a fifst storing means having stored therein a content key encrypted with a first 
storage key, content data encrypted with the content key, and a second storage key; 
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a fifst sending means for sending the encrypted content key and the second 
storage key to a key management unit; 

a first decrypting means, in the key management unit, for decrypting the 
encrypted content key using the first storage key, the first storage key being stored in 
the key management unit; 

an encrypting means for encrypting the decrypted content key using the second 
storage key; and 

a second decrypting means for decrypting the encrypted content key using the 
second storage key and decrypting the content data using the decrypted content key. 

21 . (Previously presented) The system as set forth in Claim 20, further 
comprising storage key generating means for generating the second storage key by 
means of a random number generator. 

22. (Currently amended) The system as set forth in Claim 20, wherein the 
encrypting means encrypts the decrypted content key with identification information of a- 
s e cond the storing means. 

23. (Currently amended) The system as set forth in Claim 20, wherein the 
content key is encrypted, in the fifst storing means, with the first storage key and 
identification information of the fifst storing means; and the content key stored in the fifst 
storing means is decrypted with the first storage key and the identification information of 
the fifst storing means. 
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24. (Currently amended) The system as set forth in Claim 20, wherein the first 
storing means, first decrypting means, and encrypting means form together a data 
storage, and wherein the key management unit manages the second storage key of the 
data storage. 

25. (Currently amended) The system as set forth in Claim 24, wherein the data 
storage is a data receiver wh i ch that receives a content data encrypted and sent from a 
data transmitter. 

26. (Currently amended) The system as set forth in Claim 24, further 
comprising means for storing a public key of the key management unit; and wherein the 
s e cond cont e nt storing means has stored therein the second storage key along with a 
third storage key obtained by encrypting the second storage key with the public key. 

27. (Currently amended) The system as set forth in Claim 26, wherein the data 
storage deletes the second storage key depending upon whether the third storage key 
is stored in the s e cond storing means. 

28. (Currently amended) The system as set forth in Claim 27, wherein, when 
decrypting the content key stored in the s e cond storing means, the data storage sends 
the third storage key to the key management unit; and the key management unit sends 
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the second storage key generated based on the third storage key to a data transmitter 
while performing an accounting th e data s e rv i c e following a predetermined procedure. 



29. (Currently amended) The system as set forth in Claim 24, wherein the 
s e cond storing means has stored therein identification information of the data storage. 

30. (Currently amended) The system as set forth in Claim 29, wherein the data 
storage starts decrypting the content key stored in the s e cond storing means depending 
on the result of inspection of the identification information of the data storage, stored in 
the s e cond storing means. 

31 . (Currently amended) The system as set forth in Claim 20, wherein the first 
storing means, first decrypting means, and encrypting means form together a data 
storage; and further comprising a storage key generating means, wherein the key 
management unit manages the second storage key of the data storage. 

32. (Currently amended) The system as set forth in Claim 31 , wherein the data 
storage is a data receiver which that receives a content data encrypted and sent from a 
data transmitter. 

33. (Currently amended) The system as set forth in Claim 31 , wherein the key 
management unit comprises an identification information storing means in which 
identification information of the fifst storing means is stored. 
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34. (Currently amended) The system as set forth in Claim 31 , wherein the key 
management unit accounts the data s e rvic e performs an accounting following the a 
predetermined procedure depending upon a generation of the second storage key. 

35. (Currently amended) The system as set forth in Claim 31, wherein the key 
management unit comprises means for storing storage keys; the key management unit 
generates a third storage key by encrypting the second storage key with a management 
key and sends the third storage key to the data storage; and the data storage stores the 
third storage key into the second storing means. 

36. (Currently amended) The system as set forth in Claim 35, wherein the data 
storage deletes the second storage key depending upon whether the third storage key 
is stored in the s e cond storing means. 

37. (Currently amended) The system as set forth in Claim 36, wherein the key 
management unit comprises means for storing the second storage key and identification 
information of the second storing means in which the content key encrypted with the 
second storage key is stored; the key management unit accounts performs an 
accounting , when the data storage decrypts the content key, the data s e rvic e following 
the a predetermined procedure based on the result of comparison between the 
identification information of the s e cond storing means, sent from the data storage, and 
identification information stored in an identification information storing means. 
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38. (Currently amended) The system as set forth in Claim 31, wherein the 
s e cond storing means has stored therein identification information of the data storage. 

39. (Currently amended) The system as set forth in Claim 38, wherein the data 
storage starts decrypting the content key stored in the s e cond storing means. 

40. (Currently amended) The system as set forth in Claim 20, wherein the 
content key obtained by decryption from the s e cond storing means has added thereto 
information that the content key has been obtained by restoration, as requirement 
information. 

41 . (Currently amended) The system as set forth in Claim 20, wherein the 
content key has added thereto frequency information which that limits the number of 
times the content key can be used. 
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